Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CE39AE090FA11F0B3E88AD7DAE4EC9C.roa
File: 3CE39AE090FA11F0B3E88AD7DAE4EC9C.roa (raw, json)
Hash identifier: Q9a2QSTQntQmdbRZhuoqAjWaIyKL+yAvX2Ry4COtVQA=
Subject key identifier: 0A:46:10:94:5C:44:E3:43:5F:72:67:31:74:E4:63:33:1F:2E:66:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019F87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CE39AE090FA11F0B3E88AD7DAE4EC9C.roa
Signing time: Sat 13 Sep 2025 23:34:49 +0000
ROA not before: Sun 14 Sep 2025 23:34:44 +0000
ROA not after: Sun 19 Oct 2025 23:34:44 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Oct 2025 23:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106375 (0x19f87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 23:34:44 2025 GMT
Not After : Oct 19 23:34:44 2025 GMT
Subject: CN=68c5ff99-f359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:89:e4:ef:86:ce:9a:9a:be:43:04:fb:0b:06:
46:b9:f6:29:3f:6a:d1:09:ae:b1:9a:57:cf:e4:e2:
70:b4:44:a5:f1:c4:c0:ed:f8:21:c6:5e:35:09:7d:
09:80:20:04:66:1a:ed:42:15:63:80:6a:dc:0f:7a:
ca:66:8f:be:de:8e:74:36:f3:73:9e:f9:d2:df:70:
80:03:c8:52:23:5d:2c:72:3d:71:af:a9:59:be:68:
39:77:c0:b1:da:57:6b:29:70:5d:67:be:f3:16:f4:
5b:d0:86:dc:6e:fe:8e:41:ec:9c:f1:6c:2f:5d:44:
84:6e:8a:bf:06:4c:68:e9:a1:02:28:e1:37:1b:35:
b2:3e:a4:b5:a0:f3:da:d5:88:d2:5e:86:b6:b0:48:
5b:a8:a9:af:03:ff:bf:dc:42:57:bb:75:92:49:97:
3c:c0:44:23:f0:27:a0:ca:7b:89:49:0e:39:86:69:
e6:c3:c9:32:fa:98:e8:d6:59:e4:34:04:9d:53:b3:
bd:01:c6:85:44:eb:d2:07:50:60:6c:70:8a:67:59:
4e:fe:3c:0d:b3:4f:ed:b0:17:b6:1a:80:0c:e4:c1:
8a:8e:8f:0f:04:58:68:bd:0a:56:b4:03:92:64:ce:
a4:8d:96:9f:43:8c:79:b8:87:50:f0:ba:57:ff:a8:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:46:10:94:5C:44:E3:43:5F:72:67:31:74:E4:63:33:1F:2E:66:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CE39AE090FA11F0B3E88AD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0/21
154.92.206.0/24
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:58:b1:fa:4a:d1:20:e7:e8:30:8f:89:1a:0c:ee:ad:cb:e4:
cb:b2:80:c9:7a:91:4f:e4:f2:2e:bb:b5:44:b4:c2:41:47:0b:
9c:51:92:ef:e5:34:be:87:c6:dd:af:3c:6d:89:c4:da:57:51:
3c:20:9a:2a:d9:7b:60:aa:1a:92:c8:88:75:5d:50:36:6f:b4:
27:73:6c:0f:af:eb:85:2f:2d:02:e7:37:5f:eb:07:1e:92:99:
0c:54:ec:d5:fa:32:97:31:e8:25:a2:61:48:0f:3a:f2:90:06:
eb:26:ad:72:9d:57:ac:a2:2a:d4:6d:4c:2e:56:bc:7f:ff:1e:
35:1a:59:59:e8:1d:4d:57:18:c3:c5:13:fd:ce:ae:d0:88:88:
d3:b9:a9:f2:96:b5:a3:60:c3:63:75:dd:b8:9c:f5:f5:16:19:
a8:1a:f1:20:05:6f:9b:fa:0f:41:92:63:b0:29:53:67:d7:82:
f2:5a:07:25:a3:ee:d2:9d:32:a8:77:61:aa:2b:68:5f:aa:97:
ab:f6:db:b5:6c:37:f6:9e:e0:a8:ae:29:23:91:10:0f:32:1b:
fe:0d:9f:5c:c6:5f:09:b4:3e:22:ac:54:24:bb:e0:64:36:69:
98:5d:f7:90:6c:89:86:76:92:b0:e5:00:ae:fb:e7:9b:0e:03:
63:59:c2:44
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAZ+HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwOTE0MjMzNDQ0WhcNMjUxMDE5MjMzNDQ0WjAYMRYw
FAYDVQQDEw02OGM1ZmY5OS1mMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9onk74bOmpq+QwT7CwZGufYpP2rRCa6xmlfP5OJwtESl8cTA7fghxl41
CX0JgCAEZhrtQhVjgGrcD3rKZo++3o50NvNznvnS33CAA8hSI10scj1xr6lZvmg5
d8Cx2ldrKXBdZ77zFvRb0Ibcbv6OQeyc8WwvXUSEboq/Bkxo6aECKOE3GzWyPqS1
oPPa1YjSXoa2sEhbqKmvA/+/3EJXu3WSSZc8wEQj8CegynuJSQ45hmnmw8ky+pjo
1lnkNASdU7O9AcaFROvSB1BgbHCKZ1lO/jwNs0/tsBe2GoAM5MGKjo8PBFhovQpW
tAOSZM6kjZafQ4x5uIdQ8LpX/6jVpQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFApG
EJRcRONDX3JnMXTkYzMfLmZdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQ0UzOUFFMDkwRkExMUYwQjNFODhBRDdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlzAAwQAmlzOAwQAmlzQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBdWLH6StEg5+gwj4kaDO6ty+TLsoDJepFP5PIu
u7VEtMJBRwucUZLv5TS+h8bdrzxticTaV1E8IJoq2XtgqhqSyIh1XVA2b7Qnc2wP
r+uFLy0C5zdf6wcekpkMVOzV+jKXMeglomFIDzrykAbrJq1ynVesoirUbUwuVrx/
/x41GllZ6B1NVxjDxRP9zq7QiIjTuanylrWjYMNjdd24nPX1FhmoGvEgBW+b+g9B
kmOwKVNn14LyWgclo+7SnTKod2GqK2hfqper9tu1bDf2nuCorikjkRAPMhv+DZ9c
xl8JtD4irFQku+BkNmmYXfeQbImGdpKw5QCu++ebDgNjWcJE
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:51:21 2025 by rpki-client